Senior Information Security Governance Expert (all genders)

Experteer Italy; Verona; In loco; EUR 50.000 - 90.000; Tempo pieno

Descrizione del lavoro

An established industry player is seeking a Senior Information Security Governance Expert to lead the implementation of ISO 27001 standards and enhance the organization’s security posture. This role involves conducting risk assessments, managing security incidents, and ensuring compliance with security policies. Join a vibrant team that values creativity and innovation, where you can thrive in a dynamic environment. With a commitment to diversity and inclusion, this position offers opportunities for professional growth and development. If you are passionate about information security and ready to take on exciting challenges, this role is perfect for you.

Servizi

30 days of annual holiday

Monthly allowance for public transportation

In-house canteen

Flexible working hours

Annual bonus depending on performance

Competenze

• Bachelor's or Master's degree in relevant fields or equivalent experience.
• Experience in complex Information Security Governance environments.

Mansioni

• Support ISO 27001 implementation and ISMS certification programs.
• Conduct risk assessments and manage information security incidents.

Conoscenze

Information Security Governance

Risk Assessment

ISO 27001

Project Management

Change Management

Communication Skills

Formazione

Bachelor's degree in Business Administration

Master's degree in Information Technology

Strumenti

ISO 27001 Lead Implementer

ISO 27001 Lead Auditor

CISSP

CISM

SANS

GSEC

Descrizione del lavoro

The Global Information Security department of Evotec is searching for a highly motivated and dedicated Senior Information Security Governance Expert (all genders)
Full time and permanent

Responsibilities:

1. Support the implementation of the ISO 27001 standard across the organisation with the ability to take the lead on some specific domains such as Identity & Access Management, IT Operation Security, Asset Management or Secure software Development
2. Support the ISMS certification programs, including taking part in internal and external audits
3. Ensure that the organization information security policies are maintained and remain relevant for the organization
4. Initiate and control the implementation of information security measures
5. Initiate and coordinate target group-oriented awareness and training measures on the topic of information security
6. Conduct Information Security risk assessments (ISMS risks, application and infrastructure risks, TPRM)
7. Support customer security assessments and performing supplier security assessments
8. Support information security incidents management

Qualifications:

1. Bachelor's or Master's degree in Business Administration, Information Technology, or a related field or an equivalent qualification, or equivalent work experience
2. Sound professional working experience in a complex Information Security Governance environment, including practical years of acting in global information security organizations and belonging teams, ideally in a highly regulated field such as pharmaceuticals, biotech, or healthcare
3. Profound technical knowledge of security technologies as well as of enterprise IT Security solutions
4. Excellent knowledge of security management systems and respective standards (ISO 27001, NIST, CIS, GMP)
5. Industry certifications such as PMP, ITIL, Agile are a plus
6. Industry certifications such as ISO 27001 Lead Implementer, ISO 27001 Lead Auditor, CISSP, CISM, SANS, GSEC etc. desired
7. Experience in leading projects in terms of design and assessment of information security structures and processes
8. Proven track record in dealing with complex information security & change projects and meeting conflicting situations and crisis scenarios
9. Ability to adapt to a fast-moving information security landscape and keep pace with latest concepts, new security challenges and cyber threats
10. Thrives on change, showing an ability to develop the information's security constantly forward
11. Proficiency in verbal and written communication in English. German, French or Italian language skills are an advantage

Our offer (Hamburg, Germany based):

1. A position within a vigorous and exciting professional environment promoted by an open culture and a spirit of community
2. A diverse, international workforce with a dynamic working environment that fosters creativity, innovations and teamwork
3. 30 days of annual holiday, monthly allowance for public transportation, and in-house canteen
4. Capital forming benefits, flexible working hours, holiday pay, and annual bonus depending on performance
5. Benefits may vary by location and will be discussed separately

To apply, please click on the "Apply" button and provide your application documents (CV and cover letter, including earliest possible start date and salary requirements). We are looking forward to getting to know you and to your application.

FR : Dans le cadre de sa politique Diversité, Evotec étudie, à compétences égales, toutes les candidatures dont celles des personnes en situation de handicap.
ENG : In the frame of our Diversity policy, Evotec considers, with equal competences, all applications including people with disabilities.